Docsys ProjectDocsys
2 matches found
CVE-2025-15492
RainyGao DocSys 2.02.36 and earlier contains a SQL injection in GroupMemberMapper.xml (unknown function) where manipulating the searchWord parameter enables remote exploitation. Public exploit exists; vendor not responding to disclosures. Affected component: src/com/DocSystem/mapping/GroupMemberM...
8.8CVSS6.5AI score0.00426EPSS
Save